Provided is a device unit, including a module, which can configure the device unit with an operating state from among different operating states during the start-up process and/or during ongoing operation of the device unit, wherein a first protected operating state of the different operating states is designed to allow the execution of at least one operating process which can be predefined and to optionally protect the operating process by means of defined cryptographic means, wherein at least one second operating state of the different operating states is designed to deactivate the first protected operating state and to allow at least one other changeable operating process and to optionally protect the operating process by means of specifiable cryptographic means.
Legal claims defining the scope of protection, as filed with the USPTO.
2. The device unit as claimed in claim 1, wherein the device unit is an embedded system.
3. The device unit as claimed in claim 1, wherein, depending on the operating state, at least one key for the integrity protection measures is able to be provided on the device side or by a user.
4. The device unit as claimed in claim 3, wherein device certificate for both the first protected operating state and the second operating state is made available by the module.
5. The device unit as claimed in claim 4, wherein the deactivation of the first protected operating state is able to be performed by deleting the at least one key and/or revoking the device certificate made available for the first protected operating state.
6. The device unit as claimed in claim 1, wherein the device unit is able to be activated and/or able to be deactivated.
7. The device unit as claimed in 1, wherein the first protected operating state, and the second and third operating states are each defined in at least one way selected from the group consisting of: device configuration settings, jumpers, activation codes, a device manufacturer key, the device certificate, a revocation state of the device certificate, a trust anchor, and a communication protocol with a further authority.
9. The method as claimed in claim 8, wherein at least one key for the integrity protection measures is provided depending on the operating state.
10. The method as claimed in claim 9, wherein a device certificate for both the first protected operating state and the second operating state is made available by the module.
11. The method as claimed in claim 10, wherein the deactivation of the first protected operating state is performed by deleting the at least one key and/or revoking the device certificate made available for the first protected operating state.
12. The method as claimed in method claim 8, wherein the first protected operating state, and the second and third operating systems are each defined in at least one way selected from the group consisting of: device configuration settings, jumpers, activation codes, a device manufacturer, the device certificate, a revocation state of the device certificate, a trust anchor, and a communication protocol with a further authority.
13. A computer program product, comprising a computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement a method, as claimed in claim 8.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
October 10, 2017
February 27, 2024
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.